---
id: "CVE-2010-1871"
kind: "vulnerability"
aliases: ["CVE-2010-1871"]
title: "Red Hat JBoss Seam 2: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability"
severity: "critical"
cvss: 8.8
epss: 0.83397
exploited: true
status: "open"
category: "runtime"
products: [{"name": "Red Hat JBoss Seam 2", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "java", "jboss-eap", "jboss-seam2", "red-hat-linux", "runtime"]
not_affected_if: ["no-jboss-seam2-deployed", "security-manager-properly-configured"]
published_at: "2010-08-05T13:23:09+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1871", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-1871", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-1871", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Red Hat JBoss Seam 2: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability

JBoss Seam 2 as shipped in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux lets remote attackers execute code on the server. The flaw is only exploitable when the Java Security Manager is not properly configured, and CISA lists it as actively exploited.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Red Hat JBoss Seam 2 affected ? fixed ?

## How to check

Check whether JBoss EAP 4.3.0 with jboss-seam2 is deployed, for example by looking for jboss-seam2 in the deployed application libraries.
Confirm whether the Java Security Manager is enabled and properly configured for the server.

## Fix

Apply the vendor update from Red Hat per CISA guidance; the sources do not name the fixed version.
Enable and properly configure the Java Security Manager as a mitigation.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1871
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2010-1871
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2010-1871

## From the sources

JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_